Lee Whitfield gives insight into Microsoft Volume Shadow Copies and shows how to extract meaningful data by manually deconstructing these files.
Lee provides show how to extract the drive ready from a MacBook Air.